Trojan.DownLoader12.29018

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs
'<SYSTEM32>\dumprep.exe' 1120 -dm 7 7 %TEMP%\WER787b.dir00\svchost.exe.mdmp 16325836412032068

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%TEMP%\WER787b.dir00\svchost.exe.mdmp
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'87.##3.93.38':445
'87.##3.252.182':445
'87.##3.156.158':445
'87.##3.64.211':445
'87.##3.91.70':445
'87.##3.115.15':445
'87.##3.117.17':445
'87.##3.223.94':445
'87.##3.217.7':445
'87.##3.151.244':445
'87.##3.233.203':445
'87.##3.16.233':445
'87.##3.75.139':445
'87.##3.151.187':445
'87.##3.34.49':445
'87.##3.124.42':445
'87.##3.144.160':445
'87.##3.52.144':445
'87.##3.240.9':445
'87.##3.29.48':445
'87.##3.22.56':445
'87.##3.98.165':445
'87.##3.118.124':445
'87.##3.158.117':445
'87.##3.117.248':445
'87.##3.129.71':445
'87.##3.103.215':139
'87.##3.175.206':139
'87.##3.164.175':139
'87.##3.143.131':139
'87.##3.151.226':139
'87.##3.118.159':139
'87.##3.21.110':139
'87.##3.177.55':139
'87.##3.239.1':139
'87.##3.24.116':139
'87.##3.65.53':139
'87.##3.64.162':139
'87.##3.201.40':139
'87.##3.22.142':445
'87.##3.134.200':445
'87.##3.113.102':445
'87.##3.46.203':445
'87.##3.212.187':445
'87.##3.99.227':445
'87.##3.145.221':445
'87.##3.19.106':445
'87.##3.14.51':139
'87.##3.50.198':445
'87.##3.60.150':445
'87.##3.199.151':445
'87.##3.240.9':139
'87.##3.151.187':139
'87.##3.34.49':139
'87.##3.221.242':445
'87.##3.144.160':139
'87.##3.52.144':139
'87.##3.117.248':139
'87.##3.29.48':139
'87.##3.22.56':139
'87.##3.124.42':139
'87.##3.118.124':139
'87.##3.158.117':139
'87.##3.118.6':445
'87.##3.50.252':445
'87.##3.154.50':445
'87.##3.196.74':445
'87.##3.121.104':445
'87.##3.103.121':445
'87.##3.90.191':445
'87.##3.174.234':445
'87.##3.187.156':445
'87.##3.30.188':445
'87.##3.75.149':445
'87.#53.9.70':445
'87.##3.236.203':445
'87.##3.98.165':139
'87.##3.99.227':139
'87.##3.22.142':139
'87.##3.134.200':139
'87.##3.129.71':139
'87.##3.46.203':139
'87.##3.212.187':139
'87.##3.199.151':139
'87.##3.145.221':139
'87.##3.19.106':139
'87.##3.113.102':139
'87.##3.50.198':139
'87.##3.60.150':139
'87.##3.217.7':139
'87.##3.115.15':139
'87.##3.93.38':139
'87.##3.252.182':139
'87.##3.75.139':139
'87.##3.64.211':139
'87.##3.91.70':139
'87.##3.16.233':139
'87.##3.117.17':139
'87.##3.223.94':139
'87.##3.156.158':139
'87.##3.151.244':139
'87.##3.233.203':139
'87.##3.83.54':445
'87.##3.63.206':445
'87.##3.233.219':445
'87.##3.82.253':445
'87.##3.43.207':445
'87.#53.13.1':445
'87.##3.254.241':445
'87.##3.183.193':445
'87.##3.105.202':445
'87.##3.19.10':445
'87.##3.239.117':445
'87.##3.120.239':445
'87.##3.84.102':445
'87.##3.193.168':445
'87.##3.52.149':445
'87.##3.106.64':445
'87.##3.27.112':445
'87.##3.30.67':445
'87.##3.230.10':445
'87.##3.78.45':445
'87.##3.182.77':445
'87.##3.39.182':445
'87.##3.232.195':445
'87.##3.201.199':445
'87.#53.4.34':445
'87.##3.95.166':445
'87.##3.30.155':139
'87.##3.165.55':139
'87.##3.6.158':139
'87.##3.35.33':139
'87.##3.31.188':139
'87.##3.12.142':139
'87.#53.70.7':139
'87.#53.0.96':139
'87.##3.30.130':139
'87.##3.223.247':139
'87.##3.93.147':139
'87.##3.140.211':139
'87.##3.13.19':139
'87.##3.96.213':445
'87.##3.105.40':445
'87.##3.144.191':445
'87.##3.63.78':445
'87.##3.49.193':445
'87.##3.159.43':445
'87.##3.171.83':445
'87.##3.151.159':445
'87.##3.50.201':139
'87.##3.32.191':445
'87.##3.162.57':445
'87.##3.236.101':445
'87.##3.230.10':139
'87.##3.193.168':139
'87.##3.52.149':139
'87.##3.239.1':445
'87.##3.27.112':139
'87.##3.30.67':139
'87.#53.4.34':139
'87.##3.78.45':139
'87.##3.182.77':139
'87.##3.106.64':139
'87.##3.232.195':139
'87.##3.201.199':139
'87.##3.177.55':445
'87.##3.151.226':445
'87.##3.118.159':445
'87.##3.103.215':445
'87.##3.14.51':445
'87.##3.201.40':445
'87.##3.143.131':445
'87.##3.65.53':445
'87.##3.64.162':445
'87.##3.21.110':445
'87.##3.175.206':445
'87.##3.164.175':445
'87.##3.24.116':445
'87.##3.39.182':139
'87.##3.159.43':139
'87.##3.96.213':139
'87.##3.105.40':139
'87.##3.95.166':139
'87.##3.63.78':139
'87.##3.49.193':139
'87.##3.236.101':139
'87.##3.171.83':139
'87.##3.151.159':139
'87.##3.144.191':139
'87.##3.32.191':139
'87.##3.162.57':139
'87.##3.105.202':139
'87.#53.13.1':139
'87.##3.83.54':139
'87.##3.63.206':139
'87.##3.84.102':139
'87.##3.82.253':139
'87.##3.43.207':139
'87.##3.120.239':139
'87.##3.254.241':139
'87.##3.183.193':139
'87.##3.233.219':139
'87.##3.19.10':139
'87.##3.239.117':139
'87.##3.47.184':445
'87.##3.23.59':445
'87.##3.112.87':445
'87.##3.165.31':445
'87.##3.93.120':445
'87.##3.81.32':445
'87.##3.79.219':445
'87.##3.231.84':445
'87.##3.16.172':445
'87.##3.173.225':445
'87.##3.17.122':445
'87.##3.84.163':445
'87.##3.95.212':445
'87.##3.184.106':445
'87.##3.96.249':445
'87.##3.226.55':445
'87.##3.105.139':445
'87.##3.56.72':445
'87.##3.15.214':445
'87.##3.181.93':445
'87.##3.216.101':445
'87.##3.193.52':445
'87.##3.19.134':445
'87.##3.31.177':445
'87.##3.93.183':445
'87.##3.142.104':445
'87.##3.141.50':445
'87.##3.41.141':445
'87.##3.97.164':445
'87.##3.202.195':445
'87.##3.12.33':445
'87.##3.4.203':445
'87.##3.225.3':445
'87.##3.3.188':445
'87.##3.231.223':445
'87.##3.190.216':445
'87.##3.174.120':445
'87.##3.87.49':445
'87.##3.90.237':445
'87.##3.132.176':445
'87.##3.7.132':445
'87.##3.168.7':445
'87.##3.170.142':445
'87.#53.0.42':445
'87.##3.247.29':445
'87.##3.109.233':445
'87.##3.167.91':445
'87.##3.111.18':445
'87.##3.146.26':445
'87.##3.98.195':445
'87.##3.211.89':445
'87.##3.23.59':139
'87.##3.47.184':139
'87.##3.112.87':139
'87.##3.165.31':139
'87.##3.93.120':139
'87.##3.81.32':139
'87.##3.231.84':139
'87.##3.79.219':139
'87.##3.16.172':139
'87.##3.173.225':139
'87.##3.17.122':139
'87.##3.84.163':139
'87.##3.95.212':139
'87.##3.15.214':139
'87.##3.31.177':139
'87.##3.226.55':139
'87.##3.105.139':139
'87.##3.56.72':139
'87.##3.184.106':139
'87.##3.181.93':139
'87.##3.216.101':139
'87.##3.193.52':139
'87.##3.96.249':139
'87.##3.19.134':139
'87.##3.93.183':139
'87.##3.142.104':139
'87.##3.141.50':139
'87.##3.41.141':139
'87.##3.97.164':139
'87.##3.202.195':139
'87.##3.4.203':139
'87.##3.12.33':139
'87.##3.231.223':139
'87.##3.3.188':139
'87.##3.225.3':139
'87.##3.190.216':139
'87.##3.174.120':139
'87.##3.87.49':139
'87.##3.90.237':139
'87.##3.132.176':139
'87.##3.7.132':139
'87.##3.168.7':139
'87.##3.170.142':139
'87.#53.0.42':139
'87.##3.247.29':139
'87.##3.211.89':139
'87.##3.167.91':139
'87.##3.111.18':139
'87.##3.146.26':139
'87.##3.98.195':139
'87.##3.109.233':139
'87.##3.152.19':445
'87.##3.184.151':445
'87.##3.44.247':445
'87.##3.129.215':445
'87.##3.92.142':445
'87.##3.20.45':445
'87.##3.77.82':445
'87.##3.146.133':445
'87.##3.36.229':445
'87.##3.154.118':445
'87.##3.254.243':445
'87.##3.55.86':445
'87.##3.148.46':445
'87.##3.39.74':445
'87.##3.194.62':445
'87.##3.222.2':445
'87.##3.32.43':445
'87.#53.16.0':445
'87.##3.129.82':445
'87.##3.238.1':445
'87.##3.56.237':445
'87.#53.6.56':445
'87.##3.198.222':445
'87.##3.36.199':445
'87.#53.2.36':445
'87.##3.239.197':445
'87.##3.196.74':139
'87.##3.75.149':139
'87.#53.9.70':139
'87.##3.90.191':139
'87.##3.50.252':139
'87.##3.154.50':139
'87.##3.30.188':139
'87.##3.118.6':139
'87.##3.221.242':139
'87.##3.236.203':139
'87.##3.174.234':139
'87.##3.187.156':139
'87.##3.103.121':139
'87.##3.186.100':445
'87.##3.30.186':445
'87.##3.141.30':445
'87.##3.94.240':445
'87.##3.28.50':445
'87.##3.93.50':445
'87.##3.196.174':445
'87.##3.104.196':445
'87.##3.121.104':139
'87.##3.56.141':445
'87.##3.48.190':445
'87.##3.16.78':445
'87.##3.129.82':139
'87.##3.39.74':139
'87.##3.194.62':139
'87.##3.87.49':9988
'87.##3.32.43':139
'87.#53.16.0':139
'87.#53.2.36':139
'87.##3.238.1':139
'87.##3.56.237':139
'87.##3.222.2':139
'87.##3.198.222':139
'87.##3.36.199':139
'87.##3.97.164':9988
'87.##3.84.163':9988
'87.##3.142.104':9988
'87.##3.16.172':9988
'87.##3.165.31':9988
'87.##3.93.183':9988
'87.##3.47.184':9988
'87.##3.146.26':9988
'87.##3.111.18':9988
'87.##3.141.50':9988
'87.#53.0.42':9988
'87.##3.168.7':9988
'87.##3.98.195':9988
'87.#53.6.56':139
'87.##3.93.50':139
'87.##3.186.100':139
'87.##3.30.186':139
'87.##3.239.197':139
'87.##3.94.240':139
'87.##3.28.50':139
'87.##3.16.78':139
'87.##3.196.174':139
'87.##3.104.196':139
'87.##3.141.30':139
'87.##3.56.141':139
'87.##3.48.190':139
'87.##3.36.229':139
'87.##3.20.45':139
'87.##3.152.19':139
'87.##3.184.151':139
'87.##3.148.46':139
'87.##3.129.215':139
'87.##3.92.142':139
'87.##3.55.86':139
'87.##3.77.82':139
'87.##3.146.133':139
'87.##3.44.247':139
'87.##3.154.118':139
'87.##3.254.243':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней